Bitcoin Forum

Economy => Scam Accusations => Topic started by: Bitcoinsummoner on May 30, 2020, 01:18:37 PM



Title: Beaware about virus [QnodeCoin]
Post by: Bitcoinsummoner on May 30, 2020, 01:18:37 PM
What happened: Virus on their wallet
Link of virus:
Quote
https://www.qngnode.cc/wp-content/uploads/2020/03/qnodecoin-qt-linux.tar.gz


Announcement thread: https://bitcointalk.org/index.php?topic=5252100
Archive: http://archive.is/KdQ65
Scammer profile link: https://bitcointalk.org/index.php?action=profile;u=57528
Screenshot from virus total:
https://image.prntscr.com/image/qbVcye-RRjqtsKpFh8Flaw.png


Title: Re: Beaware about virus [QnodeCoin]
Post by: bL4nkcode on May 30, 2020, 02:22:42 PM
Most qt wallets are detected with malware even the bitcoin-qt (https://www.virustotal.com/gui/file/69e4d7f710a29be6ead2ef5da2905736b7cea107213ae6ddde3bcca8affbb8fd/detection) wallet on virustotal. Which you can't assure the legitimacy of the report not unless the source code of the software was audited by the open-source community without any issue. Considering this is a new wallet/project I'm skeptical of using them in any way.


Title: Re: Beaware about virus [QnodeCoin]
Post by: Rikafip on May 30, 2020, 03:15:30 PM
Most qt wallets are detected with malware even the bitcoin-qt (https://www.virustotal.com/gui/file/69e4d7f710a29be6ead2ef5da2905736b7cea107213ae6ddde3bcca8affbb8fd/detection) wallet on virustotal. Which you can't assure the legitimacy of the report not unless the source code of the software was audited by the open-source community without any issue.
True, Virus Total might give false results, but in this case there is no question what's going on. There are several red flags beside Virus Total result:
  • account used was made in 2012, wakes up after  8 years break and immediately makes self-moderated thread
  • Ann of the project (Qnode) already exists. This looks like combination of two, Qnode and Qnodecoin. It is their standard practice, to use real project name so people think its legit


@OP Best place to report fake  ANN threads with malware is this thread in Meta Report Malware and Suspicious Links here so Mods can take Action ! (https://bitcointalk.org/index.php?topic=5182222.0). Every day there are several attempts like that, so when you come across them, just make a post  there, and don't forget to report the thread to mods so it gets deleted before someone downloads it.


Title: Re: Beaware about virus [QnodeCoin]
Post by: nutildah on May 30, 2020, 03:44:37 PM
Just for "fun" I downloaded the file, unzipped it, and sent the QT file back to VirusTotal (http://contents of the). Indeed, it appears as some scanners are just declaring the coin miner as a virus. I also scanned it with my Malwarebytes which didn't find anything... The link to the Windows wallet doesn't even work.

What's weird, however, is that they already released an ANN for this project (https://bitcointalk.org/index.php?topic=5227513.0) back in February. The user account promoting the current ANN (https://bpip.org/profile.aspx?p=xiaxiao8) is from 2012 and has zero previous posts -- no way that's an original account, was probably bought sometime in August 2018.

In any case, no decent reason to get involved with this project.

Edit: just saw the post by Rikafip, yes I agree